summaryrefslogtreecommitdiffhomepage
path: root/Crypto.hs
Commit message (Collapse)AuthorAge
* Update to lts-12.10, support ghc 8.4, and aeson 1.3.Joey Hess2018-12-08
| | | | | | | | | | | | | | | | Don't fully understand the need for the MonoLocalBinds language extension, which was not needed before but now ghc complains if it's not included, but I've tested it and it does work. All the rest of the changes are straightforward AMP changes and dep updates. Removed fgl from stack.yaml because it seems that indirect dep no longer needs to be specified for stack to build. Added custom-setup stanza since stack now warns without one. This commit was sponsored by Trenton Cronholm on Patreon.
* move unsafe hashing out of instance to avoid misuseJoey Hess2017-05-20
| | | | Avoids breaking backwards compat and should avoid future foot-shooting.
* --verify modeJoey Hess2017-05-04
| | | | This commit was sponsored by Thom May on Patreon.
* add prevEntered pointerJoey Hess2017-05-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Client requires this always point to the previous Entered it accepted, so a hash chain of Entered is built up, and there is no possibility for ambiguity about which order a client received two Entered activies in. So restoreHashes now has to try every possible combination of known hashes for both prevEntered and prevActivity. That could be significantly more work, but it would be unusual for there to be a lot of known hashes, so it should be ok. --graphviz shows this additional hash chain with grey edges (and leaves out edges identical to the other hash chain) While testing this with an artifical network lag, it turned out that signature verification was failing for Reject messages sent by the user. Didn't quite figure out what was at the bottom of that, but the Activity Entered that was sent back in a Reject message was clearly not useful, because it probably had both its prevEntered and prevActivity hashes set to Nothing (because restoreHashes didn't restore them, because the original Activity Entered was out of the expected chain). So, switched Rejected to use a Hash. (And renamed Rejected to EnteredRejected to make it more clear what it's rejecting.) Also, added a lastAccepted hash to EnteredRejected. This lets the developer find its way back to the accepted chain when some of its input gets rejected. This commit was sponsored by Trenton Cronholm on Patreon.
* add license headers to all source filesJoey Hess2017-04-30
|
* dump developer state on protocol errorJoey Hess2017-04-30
|
* split moduleJoey Hess2017-04-29
|
* make gpg work when sshed into a hostJoey Hess2017-04-28
|
* put the hash of the publickey in the clearsigned gpg messageJoey Hess2017-04-27
| | | | This way changes to JSON won't risk breaking that.
* switch wire message seralization to use protocol buffersJoey Hess2017-04-27
| | | | | | | | | | | | | | | | | | | | | | | | This way it's not tied to details of the haskell binary library, and implementations in other languages should be fairly simple to do. The haskell protobuf library was used because it does not need extra tooling or build steps. So I didn't write a .proto file, but one could fairly easily be written by following ProtocolBuffers.hs and translating it. ProtocolBuffers.hs is *extremely* repetative and tedious code. Surely there must be a way to not need to write all of that? Oh well, I wrote it.. Sizes of serialized messages: ">>> debug-me session started": 121 sending a single key press: 169 This seems equally as efficient as the binary serialization was; that was 165 bytes before elapsedTime was added. This commit was sponsored by Ethan Aubin.
* gpg sign developer session keyJoey Hess2017-04-26
| | | | | | And part of what we need to have users verify them. This commit was sponsored by andrea rota.
* include elapsedTime in ActivityJoey Hess2017-04-26
| | | | | | | | | | | | Time is relative, so the debug-me proof chain doesn't prove when things happened, but it's still useful to have some idea of how long things took to happen. This makes --replay work with logs gotten by --download. Log still includes loggedTimestamp. This is a bit redundant, and is unused now, but it's useful for log files to record when messages were received. This commit was sponsored by Riku Voipio.
* fully working signaturesJoey Hess2017-04-19
| | | | This commit was sponsored by Ethan Aubin.
* reorganized message typesJoey Hess2017-04-19
| | | | | | | | | Make Control messages be out-of-band async messages, without a pointer to a previous message. And then followed the type change through the code for hours.. This commit was sponsored by Nick Daly on Patreon.
* implement base CryptoJoey Hess2017-04-19
|
* initial CryptoJoey Hess2017-04-18
Will use Ed25519 because it's from DJB and well regarded and in common use now.